<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div>
<blockquote type="cite" class="">
<div class=""><span style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; float: none; display: inline !important;" class="">IsPassive
has always been reasonably well supported by IdPs, the problem is the application end and the error handling there.</span></div>
</blockquote>
</div>
<div class=""><br class="">
</div>
<div class="">Well, my favorite:</div>
<div class=""><br class="">
</div>
<div class=""><a href="https://docs.microsoft.com/en-us/azure/active-directory/active-directory-single-sign-on-protocol-reference" class="">https://docs.microsoft.com/en-us/azure/active-directory/active-directory-single-sign-on-protocol-reference</a></div>
<br class="">
<div class="">
<table style="border-collapse: collapse; border-spacing: 0px; table-layout: auto; width: 716px; font-size: 0.875rem; color: rgb(34, 34, 34); font-family: segoe-ui_normal, 'Segoe UI', Segoe, 'Segoe WP', 'Helvetica Neue', Helvetica, sans-serif;" class="">
<tbody class="">
<tr class="">
<td style="word-wrap: break-word; padding: 12px 16px; line-height: 1.18; vertical-align: top; border-width: 1px 0px 0px; border-style: solid; border-color: rgb(227, 227, 227);" class="">
IsPassive</td>
<td style="word-wrap: break-word; padding: 12px 16px; line-height: 1.18; vertical-align: top; border-width: 1px 0px 0px; border-style: solid; border-color: rgb(227, 227, 227);" class="">
optional</td>
<td style="word-wrap: break-word; padding: 12px 16px; line-height: 1.18; vertical-align: top; border-width: 1px 0px 0px; border-style: solid; border-color: rgb(227, 227, 227);" class="">
If provided, this should be false. Any other value causes an error.</td>
</tr>
</tbody>
</table>
<div class=""><br class="">
</div>
<div class="">I might be able to find an IdP in InCommon that doesn't support isPassive correctly. Maybe even two.</div>
</div>
<div class=""><br class="">
</div>
<div class="">If you can make this work reliably, go for it. My only addition is that isPassive and one or two entityID's are not mutually exclusive options.</div>
</body>
</html>